Deserialization in Seppmail Ag Secure Email Gateway

CVE-2026-44126

SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers to execute code via a crafted serialized object.

Vulnerability class: Insecure Deserialization

Published · last modified .

EPSS exploit prediction

EPSS: 0.008 (54.4th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 54th percentile — 54.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2026-44126: held from 0.005 to 0.008.

EPSS over last 30 days · oldest: 0.005 · newest: 0.008 · change: +0.003

Affected products

Weakness classification (CWE)

References